Linux Distros Unpatched Vulnerability : CVE-2026-55167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with...

DEBIAN-CVE-2026-55167

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167

Versions of LDAP Account Manager prior to 9.6 are vulnerable to a flaw where the WebAuthn authentication challenge is retained within the PHP session after the authentication response is processed. This allows a user who has completed valid password authentication to reuse the same signed WebAuth...

CVE-2026-55167

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167 LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167 LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167: Authentication Bypass by Capture-replay

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

PT-2026-114207

Name of the Vulnerable Software and Affected Versions LDAP Account Manager LAM versions prior to 9.6 Description Installations using WebAuthn two-factor authentication fail to clear the challenge from the PHP session after the authentication response is processed. This allows a user who has alrea...

CVE-2026-96858

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

CVE-2026-85846

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-96858

A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...

CVE-2026-85846

A Use after free vulnerability in the Windows Web Account Manager allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. Official remediation is available ...

Windows Security Account Manager Tampering Vulnerability

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

Web Account Manager Elevation of Privilege Vulnerability

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

PT-2026-112807

Name of the Vulnerable Software and Affected Versions Windows Web Account Manager affected versions not specified Description A use after free issue in the Windows Web Account Manager allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occu...

Microsoft Windows: CVE-2026-96858: Windows Security Account Manager Tampering Vulnerability

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

CVE-2026-96858: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

CVE-2026-85846: Use After Free

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85846: Web Account Manager Elevation of Privilege Vulnerability

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...